[Openswan dev] Out of tree compilation?

Paul Wouters paul at xtdnet.nl
Mon Jan 5 17:26:37 CET 2004

On Mon, 5 Jan 2004, Michael Richardson wrote:

>   You can build the ipsec.o module completely outside of the kernel with OSW 2.x.x.
>   Just point it at an appropriate /usr/src/linux/ (could even be on CDrom..)

Not always. RHEL3 (Advanced Server), or any other kernel containing the ipsec backport
won't compile.
>   Only if you need NAT-traversal.
>   If there is interest, another way of doing this has been considered - a
> netfilter module.

nat-t is already in the 2.6/2.4 backport code as UDP_ENCAPS. A netfilter module
at this point seems moot.


More information about the Dev mailing list